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mmm 
i ] 

#er is yyrmmft^t.mz^'r- h mm® <omm torn t & m v * t=.mm * n 

ttrflB * n >y * tc/s d t , iffiH a mm® m# s m v * x una a 777® \%® 
iffsax ^ - h taw 1*37* n 7 * ( 7c 7c b 1 zf n y ? tr y h ^ e> * s ) <d 

m 8H a* 7 7 r cd gBtit p*i^ i: f*f B x 5=- - h ta^SP mm ftm fc&AAfcLTJ&v 

ffrfafgi©M3l3Ptt> tfriaxT— hfB«asKiB«sftTv*s3o©:/ny ?0>3 



1 



2001-3099756 



#2 001—0 13959 



(CflBtt S tit ^ §H3(D ~7n y 7 £.> mm A 777 tCffittS tlT ^ £ -fU y 7 £ 

»#3S2ia«©»naaa^«si*T?»oT, 

£fc&#afc***«u§La£j*8*. 

i ««©««aa£i*««T?&o t, 

X L *~ a H ; 

X H *" a M X0R F(a H' b i ) 
x M «- a L XOR G(x fi , bj) 

3P&F(a, b), G(a, b), ^-#tf)ftA&*-, l&fB^M^©±^^ n y 7 



2 
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X L *~ a M ; 

x M <- a R XOR F(a M , b.) 
X H *~ a L X0R G( V V 

^maP?:F(a, b), G(a, b), ^-#©fSA&^, tufH»^<Z)±^^D y ? £ 
i £ & i: t * 

P «— a XOR b, 

ti «- S[pi] (1 £ i £ 8); 

uH <- tl| |t2| |t3| |t4; 

uL «- t5| |t6| |t7| |t8; 

uX . «- uX XOR SHR8(uX) , X= {L, H} ; 

uX *- uX XOR SHL16(uX), X={L, H} ; 

uL «- uH AND OxfOfOfOfO; 

uH «- uL AND OxOfOfOfOf; 

out «- uH || uL; 
(fc£U 7.7— hiaitSP^ej^A^Sra, Ay 7 Tfr*<DA*lZK 
A£*-, P=PH |p2| |p3| | P 4| | P 5| | P 6| | P 7| | P 8,(1 ^ i ^ 8) h U S7Ky#*ffi 
±tfca>£tl, t2, t3, t4, t5, t6, t7, t8. *fcttS[x], 64tf y MPIT?© 



3 
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3 * & £ -r £ ii&SL j&£f&=g*e 0 

iflHA'^7 7^ffiMS32yn y *©-7 ±te*^jS25^n >y * B £.#327 
fg327D y ? £Xt- hlB«8P©ffl*l^n *y * h©«^|&a^M^S:ff W 

H&-i§-ft;*Nfc £: & £ # £: I*? C S £ © JB&SLRTfl &4«t5 »iKSL8t£/S 

IrfSa V D y * JC C T , B-f IS A* -y "7 T ffi73 & JB V X T fffSa A VVTV> ftffl 



4 
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mm a* y ^ r © flBflt i: bush x ^ - h mnm (D tatt a & « v % & mm & *? 
v * & m^j s /< v -y 7 h , 

ffffB 9 Tiv 9 IC/S CT, tufa A v ~7 7 ffi^J £ ffl V \ T ItflB A »;77© l*J3P 



5 
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iff m&mtgMka *>%\z?xiv %^\mn nLxm^-r^mtimt. 

i&fe a v y t ©tan ft^ t stria* ^ - h la-nsu coiB'ti i*r^ ^ & m v ^ & n 

ffife<D7° U!f^<UXTV7°lZ.&^T, lyfBA ffi* £ ffl ^ TfafB A 
y ~7 t (£> ftaWJ® £35$T-f £ A -y77 fr#BP t. , £ ^ U 

Mfctffix., B&taA^7rli^^n^^©^4$:flx., 

tuta^^- f«faA^7T<z)fa'iiP f g^i:Bfffa^^- bmrnm^mm 

$im n * m v > £ imm^mm z. >■ 

A3 

d £ & £ 1- £ JMSLffc & £ f& $ i± 3 y n 9 A „ 

[0 0 0 1] 



6 
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[0 0 0 2] 

h U -ARg-^ (stream cipher)&fl5& £fc;!3 V^, SL$S:©^MEl«V^ b^b 
[0 0 0 3] 

[5§0£#«?&: L J: e> i: i- s IB0] 

? x. y V ^ *l # tCjg b tc t> © V ^ 0 

;£jiRl : Daemen, J., Clapp, C. , "Fast Hashing and Stream Encryption wit 
h PANAMA," Fast Software Encryption, 5th International Workshop, Procee 
dings, LNCS1372, 61-74, Spr inger-Ver lag, 1998. 
: ^K#fF 5,454,039# 



7 
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(linear feedback shift register (LFSR)) IZ% £ rS^tcW&MM^mU 

~3Cfflt3 : B. Schneier, "Applied Cryptography," John Wiley & Sons, Inc., 1 
996. pp. 369—428 

4^tbt, -fUvVVgn (block cipheO&fl^flJffib^OFB^- K(0FB mo 
de) N K (counter mode)&£##JP>;ftTV^#\ ^©SU&^fM/g 

x mmmm tfftft r*« & v ^ „ 

:/Dy ?l©#M£#JML£&^C^Ttt, £jtR3, pp. 203~206(Cf3«£ 
tiTVN^ 0 -eo^MMte, C£jtR2)£j^Tlc^«iK4{cfa&£;fi&^ 

# <7)^MS^ £ fpffi-T -5 ^ i: £ 3 c 

l£tft4 : B. Schneier, D. Whiting, "Fast Software Encryption: Designing E 
ncryption Algorithms for Optimal Software Speed on the Intel Pentium Pro 
cessor," Fast Software Encryption, 4th International Workshop, FSE'97, H 
aifa, Israel, January 1997, Proceedings, Lecture Notes in Computer Scien 
ce Vol. 1267, Spr inger-Verlag, pp.242259, 1998. 

[0 0 0 4] 
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7 7ttt«:^ ! E , ;i«)i:^f - h(<fc y/h£fc*^UM^)<z>e>*>, x^- Mc 

(i) T r -^MS©#^«$:n(fci:Ali32, 64, 128,256^^ Mtbfci:^ 7t— 

(i i) * n y * flaunt ic <fc U , B»t^ e> «Jt+l^\<D^^- h "5 7c #> 

[0 0 0 5] 

hfiflMWHiaSfc, ?n>y*tC£SDT, Ay 7 73g8iaPffl;fr«:Mv*T/"W7 

^(fe^bi 7n *y # i±nt±*y co^* A 777 ««#7n y 

9<D^m*ffi%.. 7T- b^mmz. A>y77©fHi^^Xf - hiS'l!g|5©f3 

[0 0 0 6] 

ii, ^f - hfE11§IHcf31g£;nTv^3o(Z>7n y gli£:|g2<2-otf) 



9 
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3*15 &$izfcm?z>mmffizffixz>o 

[0 0 0 7] 

±ffim&.lZ. Xf - h©*£3£3:/ny *J£LtXntf>y h £ "T Z> d t K <fc V , 

o 

[0 0 0 8] 
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^•fKSLUC^J^^fi (pseudorandom number generator) : SLifcJ'J (random number 
sequence ) fc&©«0J»#(initial value) &^x.T, SffilSLR^J (pseu 
dorandom number sequence) £ ^^"^"-5 ^ufo 

^{KSLISt (pseudorandom number) : ^pg, *> L < fcfc&RgCDfcf V if 

&iMBf-5f (symmetric-key encryption) : -^Hb^JI t. ^-SHb^LSUC |Hf DH £ 

(plaintext) : Hf -^-ftJMftN * \±ttfcim&G> J f- # T*& »J , ^ 
^ ; # ;v f b $ tl £ V ; I * * t 1 J T t - # ti ^ * tl -5 o 

7-*-#£-7"a>y?£^e>)> 81 1 & fC Jf##t:ig £ ft e> ^ £ T? If #ffc*&Jl (encrypt i 
on) £ fclt'&mmm (decrypt ion) ^ «P^S*. 

**(Sfg) : 3~10l^y hll^gii. «Vx#»?gffifc«flitt&flSofe 
[0 0 0 9] 

##W©£ifc^M^H&Mv*T«W!'*-*. #B©ffiiH!lcJBv>Tv^fB-* rxoR 
j hr^O^flfiWa&afD (exclusive or)?:St 0 

IU2(C^-r J;e>tC, *m(6M©SLK^^«(200)tt, l^n »y * £64t^y h £ 
L£££64kf v h X3^n y ^©ISHSM^TffeS^^- h SB'UgP (JSAT, h 
h \\ -9 ) (201) <fc , 64 If y h X 32 >f a >y ? ©gBUMJUcT-fe S (202), 
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Xf- M201)©ftgMKffil$:Sg$T , rSX7 i - N^2P(203), Ay :7 7CD|*!^£3£ 
§ff 6A-/:7 7^#!3P(204), A^^TAA^f'JfiSX^ >y^(207)£^-;ft£ 
M»t5»(214)t«§tlS. 

V>2r#«fcV> 0 b V^lfeSSWc&^T tt. -5 1 V U y V £64fcf y 

h£U ^f-b©^t$l:3yD>y^, Ay 7 7 $ £32:/n y V H hX 

*nas«f ^A-F^xn: xmm l tm&. b u # £ & s * □ * * (210) 

&S<rr*fc, X^-h(201)tt, Xf - h^MS^OSXDM&frLV^^- hffl 

mWk3<204)(Dmz§xL^mtL Lxmm-tz* M&®tiK2u)\**uy ^^(210 
(2i2)i:x7 : — h(2oi)ffi^©v^-r*iS:aiiR-rsA^«*;#^s. Ay77» 

.(204) tt, X>T ^^(207)<Z)^JU#^.lC/SDT^$tlSAiJ'fii(64tfy h)£3§i# 
(DAyyr&mfrioffifr&Ayyr (202) © f*J^ £ -r £ = 

[0 0 10] 

05 li, M2(D Ay -7 7 MWkW> (204) 5: J: »J M C«^t5 ti © T? S> S . 

Ay7*3£g|9S(204)Wu A-y77 (202)^A;fr£;ft£32^n y *<Z>e> t>, _t 
fe^£>t&X.T25?*ni y ^ B £327~U y V U*^t=.7"U >y ? 5;0i:oTfiffl7*D 
y ? Hhxmti-t&o Ig25^ny*£, £32:/ny*©_fc&i:T&&A*i 

o H32yn^y^h, x>r y*(207)<Dmj3£<Dmmwwimmm%*fi'Df=. 

[0011] 

#§y&MT*tt, SL»^fi)t$l«(200)ti, ®i©#«I;*^y :7l02fre>X7^y ^108 
£ e> o * fc, 1 * n v 9 % iC64 \£.vY<n> >y h #f («$#SL«#J) £ 3 . 
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XT^y ^I02fre>104&c;fcv^ ftW«JB©*JJB'ft, SL8t£j&<0fc«><Z>izy hT 
y :7°££f "5. 

H^y^HTC : 7.7-- h(201), /1y77(202)©rt^t, J: tfWHISBI(214)|* 
SJO^^U *y -fey hA#(211)JC«fc y y-fey hfS„ t^TCl^y h 

X ^ y :7l03 : SLR^J £ t & mm t. U T , Hftffil gL«J## £ =fe A^J (21 
2)t5. A;frtci:&64if*/ hoifi&^it, *f8#(2l0)£A;frt-S 
o ^{CA^JtCTfi64^y h(DH^S:#^.T> ^fg-S§-(210)&A;W£ o 

£„ Zltie>©^0 V #*MtCttAy 7 7(202)-^^^- h (201) tela IC 
i&f^-rs. S6tCffi*E8tN(213)S:A*"r*. *H»J^^ *«t*SL»^JS: 

*5^y:/104 : %JMWM*$iJ&-t2>t=.thlz, 128?ny>7mm$:fi$o ffl'fflmm 
(214)1*, i(Z)Xf>yOTTi^^ >y^(207)#*^- h ffiij & mm-tZ J: ^ {C 

7. -Y >y ^ (207) tC A# $ tl £ o 

x^«y^io5 : N=o^p>^r(x^>y ^109) -rs^ -£e>-e&v\&e>x^y yi 

06JC3ttf o 

X^^^106 : hg£&m203)l±gEifc#tJg&f?^, &3H&L»#f64lf y h £ 

Xtv7107 : A'«y77tXf - MC, * □ y h ^SIBP (203) t. 

A v y r WSsM (202) iz <fc -5 ^m&SjjsgJH £ £ £ Jgir^ S „ 

7*7~V ^108 : N=N-1£ bt, >y ^105{CM-5o 

±fB^^ y ^"105^ ^Xf')/ y 108® Ms y jg L JC «fc »J *lS — o& _fc<08P# 

SL»'J£, M;U2t^y h3*»^Sii:K:J:y»fa©*(Ha»^IS:#*. 

Z>±M*t-v :/l05fr e> X-r v :7108£ j£©Sfef£S: 9 > F£ vn e> . 
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[0012] 

as*:*:©, mmmzB-fmT'&Zo msommz&^x. ^-vmiXDmmz 

, 1 1 liM^T (concatenation, -ttl-ftl*^. 
h(201)©'fitS:n- FtS„ 
a H 11 a M 11 a L = h^fES(192tf >y h) 

X L *~ a H ; 

X H *~ a M X0R F(a H' b i ) 

x M a L XOR G(x H , b j )(^^bi=» fc j) 

x M &8P#a»*JfcLTffl;frU ^^f-Mtlt, X H 11 X M 11 X L* 

^(DK± t z n y * t+i ( * « ^ <D?k<D^ v y K) jc & w & Fgaast (401) /\© a* 

fta&SJfnstifc*, * n y ^ t+ijcfev^TFW«(4oi)©ffi^^^ftn«ra&3ffi?usti 
S «>, FKH5t (401) ii GBB& (402) i: teH& s =& fs t> mmr* & Z> z t ifim £ L 

[0 0 13] 

T, X-r- h(201)©^g|^©j:e»lCL/Tf?e). 
X^- h (201) ©It &n- FtS. 
a H II a M || a L = Mt(192tfy h) 

X L *~ a M ; 

X M *~ a H X0R F(a M' b i ) 
X H *~ a L X0R G( V b j ) 

x H £gP#SL8t#f£ UTttiijU #:©X:r — h-fitil IT, x H || x M || x L $: 
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04 K3f*3i£J:*itf, ^^D^t(tfcttfe57')> K)lc fctt£F|»$t 
(401)/v.<5DA*4:GMSS[(402)^<Z)A*a^HCJCJ&y. &S<£>«Ht#-JtglC& 

[0014] 
[0 0 15] 

±IBE3, H4-efflv^feFM«(*feiiGB83R)©*3t&H6lc«^t*. — p©A 
Sl(601)~S8(602){C<fc y#M§JgSSfc&ff3. Sjtfy** Sl(601)~S8(602)©8fcf 

;£SR5 : J. Daemen, V. Rijmen, "AES Proposal: Rijndael," The first AES C 
andidate Conference, available at http://www.esat.kuleuven.ac.be/~rijmen 
/ri jndael/ri jndaeldocV2.zip. 

©RijndaelT*^t)tlT^SJWT©^SI^S:^^rh^-Jti-e«>-» 0 
S [256] = { 



82, 


9, 


106, 


213, 


48, 


54, 


165, 


56, 


191, 


64, 


163, 


158, 


129, 


243, 


215, 


251, 


124, 


227, 


57, 


130, 


155, 


47, 


255, 


135, 


52, 


142, 


67, 


68, 


196, 


222, 


233, 


203, 


84, 


123, 


148, 


50, 


166, 


194, 


35, 


61, 


238, 


76, 


149, 


11, 


66, 


250, 


195, 


78, 


8, 


46, 


161, 


102, 


40, 


217, 


36, 


178, 


118, 


91, 


162, 


73, 


109, 


139, 


209, 


37, 


114, 


248, 


246, 


100, 


134, 


104, 


152, 


22, 


212, 


164, 


92, 


204, 


93, 


101, 


182, 


146, 
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108, 


112, 


72, 


80, 


253, 


237, 


185, 


218, 


94, 


21, 


70, 


87, 


167, 


141, 


157, 


132, 


144, 


216, 


171, 


0, 


140, 


188, 


211, 


10, 


247, 


228, 


88, 


5, 


184, 


179, 


69, 


6, 


208, 


44, 


30, 


143, 


202, 


63, 


15, 


2, 


193, 


175, 


189, 


3, 


1, 


19, 


138, 


107, 


58, 


145, 


17, 


65, 


79, 


103, 


220, 


234, 


151, 


242, 


207, 


206, 


240, 


180, 


230, 


115, 


150, 


172, 


116, 


34, 


231, 


173, 


53, 


133, 


226, 


249, 


55, 


232, 


28, 


117, 


223, 


110, 


71, 


241, 


26, 


113, 


29, 


41, 


197, 


137, 


111, 


183, 


98, 


14, 


170, 


24, 


190, 


27, 


252, 


86, 


62, 


75, 


198, 


210, 


121, 


32, 


154, 


219, 


192, 


254, 


120, 


205, 


90, 


244, 


31, 


221, 


168, 


51, 


136, 


7, 


199, 


49, 


177, 


18, 


16, 


89, 


39, 


128, 


236, 


95, 


96, 


81, 


127, 


169, 


25, 


181, 


74, 


13, 


45, 


229, 


122, 


159, 


147, 


201, 


156, 


239, 


160, 


224, 


59, 


77, 


174, 


42, 


245, 


176, 


200, 


235, 


187, 


60, 


131, 


83, 


153, 


97, 


23, 


43, 


4, 


126, 


186, 


119, 


214, 


38, 


225, 


105, 


20, 


99, 


85, 


33, 


12, 


125} ; 



$.tc XT-btm3fr<b<DAl}$:a. A y V T fr<=> (D K± &b, P=pl||p2|| P 
3 1 | p4 1 | p5 1 | p6 1 | p7 1 | p8 , (1 ^ i ^ 8) £ U S;tfy#* SI (601) — S8(602)<Z)8tf 
V hffi^fc-h&friD^tl-ftltl, t2, t3, t4, t5, t6, XI, t8£Ltc£g, ®6 

ic^tliMtt^T© <fc e> ic%^i±-5o TfS(D^4«-eiH#rs [x] jfesrff-/ * 

* Sl(601)~S8(602)CD8tfy hffiij^^L, TsHRx, SHLxj l±^tl-? ? tl64lf *j Y 
P «- a XOR b ; 
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ti 


*~ 


S[pi] (l^i^8); 


uH 


«- 


tl| |t2| |t3||t4; 


uL 


«- 


t5| |t6| |t7| |t8; 


uX 




uX XOR SHR8(uX), X= {L, H} ; 


uX 




uX XOR SHL16(uX) , X= {L, H} ; 


uL 




uH AND OxfOfOfOfO; 


uH 




uL AND OxOfOfOfOf; 



out «r- uH | | uL; 

s <bic Ay 7 7^e><z)Ai7(2ii) z}mMmm<DmzMmwmmffi-?2>mmz 

[0016] 
[0017] 

mmmmmm iz&m s ti y n a & mn-t <& z. t k. * *; n^-r s . #7° n 



1 7 
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o 

[0018] 

^f'yy2:f-^ i£f§#&> _t3B#^flt* & #x. fcifc-i§-«##UI$5S (904) £ 
^T^X^-^OS^BiF^fb'r.S. ®8£^o T0g#^flL3S$g»(9O4)tf)Ifr 

B##^#^a^fi(904)li, A*(1003)(i©«^ti¥^f s -* (903)) fcimC 

zim^f&mm (200) ic, ±fla«tflrff (iood t (1002) a m^ta^ & #*. 

£ Zl £ IC J: »J fx e> o £J*S nfc««SL«#l(1005) £ f 5 - * (903) 
ftrf S ^ J: oTffi#(1004) £ UTBt^^CT-*- $ (1006) £|f ffi U ffi^Ji--5o 
TsTV-yZ : "r-#j3M§#«U Bt-^^C^-^ (1006) bV-ZJy*-? 
x-*SSff(905).&JB^T, *y h»7-^(906)$:iibTT-*-^^ff#iCiiM-r^> 
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o 

TsT-VZt* : T r -^SfB#t±. *V W-Z^yZ-y x-Xlgg(908)£^L 

l*#(»«3i««(904)Ji, A*(1003)(r©^liHiP#35CT : -^(1006))h|Wf 
m (1005) fclfc -J^:*-?- * (1006) &gMBW3&JIftIt- * d £ IZ J; o T ft* (1004) £ 

[OO 1 9] 

[0 0 2 0] 
[8F-3©fM!] 

200---||&SL8t£/£igtt, 201-;*^- K 202-A-/7T, 203-^7— hIEiJiaJ 
, 204-^^"7r3Efil«P, 206-ffi^"tsaa^J, 207- ^>fy^, 210-*D«y* 
AiJ> 211-U-fey hA*, 212- A^J, 213-;5piC<Z>«Sflt«N©A*, 214-ffl 
t9@H. 401-"#MKjg3ESlF, 601~604---8fcTy h©«gl*> 901-^- #^f§|gffi: 
, 902-gB1tt$gfif« 903--5 2 -*, 904-P|f#^#MSMfi> 905-* y h >7-*-f 
>^-^x-XigB. 906-#yhy-^, 907-^~^^m^U> 908-*yh 

>^r-7ai-X^g, 910-fE'H^S, 912—7*- ##&^g, 1001- 

1002-gL»J#^. lOOS-A*^-*, 

[Hi] 
[®2] 



ffilEff 2001-3099756 



#2001-013959 

* * 

[03] 
[04] 

[05] • 

##§0J! tc J: £ K&aSt£j£$£V<Z> A y 7 7 ©«J& fc^f ilSSt & 5 = 
[0 6] 

03, *fett04©x^- hwzm$T*m^&m&m^mmF<Dwmzm-tMti&m 

[07] 
[0 8] 



ffi|E#2 001-3099756 



#2001—013959 



[*£«] mm 
mi] 

mi 



101 




i 



£EliE# 2001-3099756 



#2001—013959 



[02] 



211 
/ 

210 



213 



N 



212 



A* 



mi 

ttas.*£j»« 200 



201 



214 207 



215 203 









as* 













204 




S 







/ ^77 



206 



202 



2001-3099756 



#2001-013959 



[03] 



m3 




ffiH#2 0 0 1 



#2001—013959 



[04] 

g|4 




4 



miiE#2 001-3099756 



#2001—013959 



[0 5] 

ms 




5 



ffif£#2 001-3099756 



#2 001—013959 



[16] 




6 



ffifiE#2 001-3099756 



#2001—013959 



[07] 



903 

1001 
902 

1002 



906 



1001 



ttfttt 



1002 



910 



912 



IBISES 



117 




904 



901 



905 



908 




904 



907 



ffiSE# 20 0 1- 3099756 



• 



#2001—013959 



[08] 




8 



ffi$E#2 001-3099756 



#2001—013959 

[KB] 
[Ml 

y ^T^*^32xmf h-e&y, (ii)^ n ^ ^«ff«rtc j: B^Mtfr <bt$Mt+i 
'xcDX^r- h<Z)«J»^35S:ff ^fc«>©^-r- h^MPU^- h (n 

if*; ntfy h &j])<D}mm mm *2m> &&&&&& r.-D<D&mmm& 
mmmi S3 



i 



ffiffE# 2001-3099756 



#2001—013959 



ft m A 



[0 00005108] 



1 . B . 1 9 9 0 8H31H 



1 



ffiflff 2001-3099756 



